Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-2983
HistoryAug 19, 2011 - 12:00 a.m.

CVE-2011-2983

2011-08-1900:00:00
ubuntu.com
ubuntu.com
16

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

71.9%

Mozilla Firefox before 3.6.20, Thunderbird 2.x and 3.x before 3.1.12,
SeaMonkey 1.x and 2.x, and possibly other products does not properly handle
the RegExp.input property, which allows remote attackers to bypass the Same
Origin Policy and read data from a different domain via a crafted web site,
possibly related to a use-after-free.

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchfirefox<ย 3.6.20+build1+nobinonly-0ubuntu0.10.04.1UNKNOWN
ubuntu10.10noarchfirefox<ย 3.6.20+build1+nobinonly-0ubuntu0.10.10.1UNKNOWN
ubuntu10.04noarchthunderbird<ย 3.1.12+build1+nobinonly-0ubuntu0.10.04.1UNKNOWN
ubuntu10.10noarchthunderbird<ย 3.1.12+build1+nobinonly-0ubuntu0.10.10.1UNKNOWN
ubuntu11.04noarchthunderbird<ย 3.1.12+build1+nobinonly-0ubuntu0.11.04.1UNKNOWN
ubuntu10.04noarchxulrunner-1.9.2<ย 1.9.2.20+build1+nobinonly-0ubuntu0.10.04.1UNKNOWN
ubuntu10.10noarchxulrunner-1.9.2<ย 1.9.2.20+build1+nobinonly-0ubuntu0.10.10.1UNKNOWN

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

71.9%